|
|
@@ -2,6 +2,7 @@
|
|
|
|
|
|
namespace shop\controllers;
|
|
|
|
|
|
+use biz\admin\classes\ShopAdminClass;
|
|
|
use biz\admin\services\ShopAdminService;
|
|
|
use biz\admin\services\AdminService;
|
|
|
use biz\auth\services\AuthService;
|
|
|
@@ -24,193 +25,196 @@ use yii\helpers\Json;
|
|
|
*/
|
|
|
class AuthController extends PublicController
|
|
|
{
|
|
|
-
|
|
|
- //准备授权 shish 2019.11.19
|
|
|
- public function actionPrepare()
|
|
|
- {
|
|
|
- $get = Yii::$app->request->get();
|
|
|
- $url = isset($get['url']) && !empty($get['url']) ? $get['url'] : '';
|
|
|
- if (empty($url)) {
|
|
|
- util::fail('没有网址');
|
|
|
- }
|
|
|
- $account = httpUtil::getAccount($url);
|
|
|
- if (empty($account)) {
|
|
|
- util::fail('没有商家帐号');
|
|
|
- }
|
|
|
- $merchant = MerchantService::getById($account);
|
|
|
- if (empty($merchant)) {
|
|
|
- util::fail('商家无效');
|
|
|
- }
|
|
|
- /**
|
|
|
- * authScope 参数的说明
|
|
|
- * 1.用户通过公众号菜单打开网页，因为已经关注过了公众号，已经生成过用户信息，所以只要使用snsapi_base静默方式拿到openid就可以
|
|
|
- * 2.为了保证付款页的访问速度，暂时只要通过snsapi_base静默方式拿到openid先生成可以用的用户信息即可
|
|
|
- * 3.其它情况需要获取用户完整信息的，使用snsapi_userinfo让用户授权获取信息即可
|
|
|
- * 4.snsapi_base静默方式使用的场景更多，所以参数authScope默认使用snsapi_base
|
|
|
- */
|
|
|
- $authScope = isset($get['authScope']) ? $get['authScope'] : 'snsapi_base';
|
|
|
- $urlEncode = stringUtil::urlSafeB64Encode($url);
|
|
|
- //微信授权获取code shish 2019.11.24
|
|
|
- wxUtil::getCode($urlEncode, $merchant, $authScope);
|
|
|
- util::end();
|
|
|
- }
|
|
|
-
|
|
|
- //微信授权获取用户信息 shish 2019.11.20
|
|
|
- public function actionGetUserInfo()
|
|
|
- {
|
|
|
- $get = Yii::$app->request->get();
|
|
|
- $code = isset($get['code']) ? $get['code'] : '';
|
|
|
- if (empty($code)) {
|
|
|
- util::fail('没有获取用户code');
|
|
|
- }
|
|
|
- if (isset($get['state']) && $get['state'] == 'authdeny') {
|
|
|
- util::fail('auth fail');
|
|
|
- }
|
|
|
- $urlEncode = $get['url'];
|
|
|
- $url = stringUtil::urlSafeBase64Decode($urlEncode);
|
|
|
- $account = httpUtil::getAccount($url);
|
|
|
- if (empty($account)) {
|
|
|
- util::stop('商店ID无效！！');
|
|
|
- }
|
|
|
- $merchant = xhMerchantService::getByAccount($account);
|
|
|
- if (empty($merchant)) {
|
|
|
- util::stop('商店无效');
|
|
|
- }
|
|
|
- $merchantId = $merchant['id'];
|
|
|
- $authScope = isset($get['authScope']) ? $get['authScope'] : '';
|
|
|
- if (empty($authScope)) {
|
|
|
- util::stop('没有授权类型');
|
|
|
- }
|
|
|
- $data = wxUtil::getOpenId($code, $merchant);
|
|
|
- if ($data === false) {
|
|
|
- //微信授权获取code shish 2019.11.24
|
|
|
- wxUtil::getCode($urlEncode, $merchant, $authScope);
|
|
|
- util::end();
|
|
|
- }
|
|
|
- $openId = $data['openid'];
|
|
|
- $access_token = $data['access_token'];
|
|
|
- $user = UserService::getByOpenId($openId, $merchantId);
|
|
|
- //用户来源
|
|
|
- $userSource = Yii::$app->dict->getValue('userSourceGetId', 'official');
|
|
|
- $source = $userSource['name'];
|
|
|
- if (empty($user)) {
|
|
|
- //$authScope 默认是 snsapi_base 公众号菜单打开网页(已经关注公众号，有完整信息)、打开付款页(有些客户只付款，没有后续可以不用登记完整信息)，只需要获取openid
|
|
|
- $originalInfo = [];
|
|
|
- $originalInfo['openId'] = $openId;
|
|
|
- $originalInfo['merchantId'] = $merchantId;
|
|
|
-
|
|
|
- //没有关注公众号，需要获取用户完整信息的情况，则通过弹框授权
|
|
|
- if ($authScope == 'snsapi_userinfo') {
|
|
|
- $baseInfo = wxUtil::authGetUserInfo($openId, $access_token);
|
|
|
- $originalInfo = array_merge($baseInfo, $originalInfo);
|
|
|
- $originalInfo['isFull'] = 1;
|
|
|
- $originalInfo['unionId'] = $baseInfo['unionid'];
|
|
|
- $originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
|
|
|
- $originalInfo['nickName'] = $baseInfo['nickName'];
|
|
|
- }
|
|
|
- $user = UserService::replaceUser($originalInfo, $source, $merchantId);
|
|
|
- } else {
|
|
|
- if ($user['isFull'] == 0) {
|
|
|
- if ($authScope == 'snsapi_userinfo') {
|
|
|
- $baseInfo = wxUtil::authGetUserInfo($openId, $access_token);
|
|
|
- $originalInfo = $baseInfo;
|
|
|
- $originalInfo['isFull'] = 1;
|
|
|
- $originalInfo['unionId'] = $baseInfo['unionid'];
|
|
|
- $originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
|
|
|
- $originalInfo['openId'] = $baseInfo['openid'];
|
|
|
- $originalInfo['nickName'] = $baseInfo['nickName'];
|
|
|
- $originalInfo['merchantId'] = $merchantId;
|
|
|
- $user = UserService::replaceUser($originalInfo, $source, $merchantId);
|
|
|
- }
|
|
|
- }
|
|
|
- }
|
|
|
- //这个的基类没有设置统一的全局变量，这里进行设置一次
|
|
|
- $userId = $user['id'];
|
|
|
- $admin = AdminService::getByCondition(['userId' => $userId]);
|
|
|
- if (empty($admin)) {
|
|
|
- util::fail('您没有权限访问');
|
|
|
- }
|
|
|
- $adminId = $admin['id'];
|
|
|
- //获取token
|
|
|
- $token = jwt::getNewToken($adminId);
|
|
|
- $url = strpos($url, '?') === false ? $url . '?token=' . $token : $url . '&token=' . $token;
|
|
|
- $this->redirect($url);
|
|
|
- }
|
|
|
-
|
|
|
- //登陆并拿到token shish 2019.11.23
|
|
|
- public function actionLogin()
|
|
|
- {
|
|
|
- $get = Yii::$app->request->get();
|
|
|
- $mobile = isset($get['mobile']) ? $get['mobile'] : 0;
|
|
|
- if (stringUtil::isMobile($mobile) == false) {
|
|
|
- util::fail('请填写正常的手机号');
|
|
|
- }
|
|
|
- $password = isset($get['password']) && !empty($get['password']) ? $get['password'] : '';
|
|
|
- if (empty($password)) {
|
|
|
- util::fail('请输入密码');
|
|
|
- }
|
|
|
- $admin = AdminService::getByCondition(['mobile' => $mobile]);
|
|
|
- if (password_verify($password, $admin['password']) == false) {
|
|
|
- util::fail('密码错误');
|
|
|
- }
|
|
|
- $adminId = $admin['id'];
|
|
|
- $shopAdmin = ShopAdminService::getByCondition(['adminId' => $adminId]);
|
|
|
- $merchantId = isset($shopAdmin['merchantId']) ? $shopAdmin['merchantId'] : 0;
|
|
|
- $shopId = isset($shopAdmin['shopId']) ? $shopAdmin['shopId'] : 0;
|
|
|
- if (empty($shopId)) {
|
|
|
- util::fail('您不是管理员');
|
|
|
- }
|
|
|
- //管理员关联门店
|
|
|
- Yii::$app->redis->executeCommand('SET', ['LOGIN_ADMIN_SHOP' . $adminId, $shopId]);
|
|
|
- //获取token
|
|
|
- $token = jwt::getNewToken($adminId);
|
|
|
- util::success(['token' => $token, 'account' => $merchantId, 'shopId' => $shopId]);
|
|
|
- }
|
|
|
-
|
|
|
- //静默获取小程序用户信息
|
|
|
- public function actionMiniInfo()
|
|
|
- {
|
|
|
- $code = Yii::$app->request->get('code', '');
|
|
|
- if (empty($code)) {
|
|
|
- util::fail('没有CODE信息');
|
|
|
- }
|
|
|
- $wxMiniBase = WxOpenService::getWxMiniBase();
|
|
|
- $appId = $wxMiniBase['miniAppId'];
|
|
|
- $appSecret = $wxMiniBase['miniAppSecret'];
|
|
|
- if (empty($appSecret)) {
|
|
|
- util::fail('没有找到小程序的密钥');
|
|
|
- }
|
|
|
- $url = "https://api.weixin.qq.com/sns/jscode2session?appid={$appId}&secret={$appSecret}&js_code={$code}&grant_type=authorization_code";
|
|
|
- $curl = new curl\Curl();
|
|
|
- $result = $curl->get($url);
|
|
|
- $arr = Json::decode($result);
|
|
|
- $sessionKey = isset($arr['session_key']) ? $arr['session_key'] : '';
|
|
|
- $openid = isset($arr['openid']) ? $arr['openid'] : '';
|
|
|
- $cacheKey = 'SHOP_MINI_SESSION_KEY_' . $openid;
|
|
|
- Yii::$app->redis->executeCommand('SET', [$cacheKey, $sessionKey]);
|
|
|
- if (empty($openid)) {
|
|
|
- Yii::info(json_encode($arr));
|
|
|
- util::fail('没有获取到小程序openId');
|
|
|
- }
|
|
|
- //用户来源
|
|
|
- $userSource = UserClass::$userSourceId['mini']['name'];
|
|
|
- $admin = AdminService::getByMiniOpenId($openid);
|
|
|
- $shopId = 0;
|
|
|
- if (empty($admin)) {
|
|
|
- $adminInfo = ['miniOpenId' => $openid];
|
|
|
- $admin = AdminService::replaceAdmin($adminInfo, $userSource);
|
|
|
- $adminId = $admin['id'];
|
|
|
- } else {
|
|
|
- $adminId = $admin['id'];
|
|
|
- $relate = ShopAdminService::getByCondition(['adminId' => $adminId]);
|
|
|
- $shopId = isset($relate['shopId']) ? $relate['shopId'] : 0;
|
|
|
- }
|
|
|
- //头像
|
|
|
- $admin['avatar'] = isset($admin['avatar']) && !empty($admin['avatar']) ? Yii::$app->params['imgHost'] . $admin['avatar'] : Yii::$app->params['imgHost'] . '/retail/default-img.png';
|
|
|
- //管理员关联商家
|
|
|
- Yii::$app->redis->executeCommand('SET', ['LOGIN_ADMIN_SHOP' . $adminId, $shopId]);
|
|
|
- $token = jwt::getNewToken($adminId);
|
|
|
- util::success(['token' => $token, 'admin' => $admin, 'shopId' => $shopId]);
|
|
|
- }
|
|
|
-
|
|
|
+
|
|
|
+ //准备授权 shish 2019.11.19
|
|
|
+ public function actionPrepare()
|
|
|
+ {
|
|
|
+ $get = Yii::$app->request->get();
|
|
|
+ $url = isset($get['url']) && !empty($get['url']) ? $get['url'] : '';
|
|
|
+ if (empty($url)) {
|
|
|
+ util::fail('没有网址');
|
|
|
+ }
|
|
|
+ $account = httpUtil::getAccount($url);
|
|
|
+ if (empty($account)) {
|
|
|
+ util::fail('没有商家帐号');
|
|
|
+ }
|
|
|
+ $merchant = MerchantService::getById($account);
|
|
|
+ if (empty($merchant)) {
|
|
|
+ util::fail('商家无效');
|
|
|
+ }
|
|
|
+ /**
|
|
|
+ * authScope 参数的说明
|
|
|
+ * 1.用户通过公众号菜单打开网页，因为已经关注过了公众号，已经生成过用户信息，所以只要使用snsapi_base静默方式拿到openid就可以
|
|
|
+ * 2.为了保证付款页的访问速度，暂时只要通过snsapi_base静默方式拿到openid先生成可以用的用户信息即可
|
|
|
+ * 3.其它情况需要获取用户完整信息的，使用snsapi_userinfo让用户授权获取信息即可
|
|
|
+ * 4.snsapi_base静默方式使用的场景更多，所以参数authScope默认使用snsapi_base
|
|
|
+ */
|
|
|
+ $authScope = isset($get['authScope']) ? $get['authScope'] : 'snsapi_base';
|
|
|
+ $urlEncode = stringUtil::urlSafeB64Encode($url);
|
|
|
+ //微信授权获取code shish 2019.11.24
|
|
|
+ wxUtil::getCode($urlEncode, $merchant, $authScope);
|
|
|
+ util::end();
|
|
|
+ }
|
|
|
+
|
|
|
+ //微信授权获取用户信息 shish 2019.11.20
|
|
|
+ public function actionGetUserInfo()
|
|
|
+ {
|
|
|
+ $get = Yii::$app->request->get();
|
|
|
+ $code = isset($get['code']) ? $get['code'] : '';
|
|
|
+ if (empty($code)) {
|
|
|
+ util::fail('没有获取用户code');
|
|
|
+ }
|
|
|
+ if (isset($get['state']) && $get['state'] == 'authdeny') {
|
|
|
+ util::fail('auth fail');
|
|
|
+ }
|
|
|
+ $urlEncode = $get['url'];
|
|
|
+ $url = stringUtil::urlSafeBase64Decode($urlEncode);
|
|
|
+ $account = httpUtil::getAccount($url);
|
|
|
+ if (empty($account)) {
|
|
|
+ util::stop('商店ID无效！！');
|
|
|
+ }
|
|
|
+ $merchant = xhMerchantService::getByAccount($account);
|
|
|
+ if (empty($merchant)) {
|
|
|
+ util::stop('商店无效');
|
|
|
+ }
|
|
|
+ $merchantId = $merchant['id'];
|
|
|
+ $authScope = isset($get['authScope']) ? $get['authScope'] : '';
|
|
|
+ if (empty($authScope)) {
|
|
|
+ util::stop('没有授权类型');
|
|
|
+ }
|
|
|
+ $data = wxUtil::getOpenId($code, $merchant);
|
|
|
+ if ($data === false) {
|
|
|
+ //微信授权获取code shish 2019.11.24
|
|
|
+ wxUtil::getCode($urlEncode, $merchant, $authScope);
|
|
|
+ util::end();
|
|
|
+ }
|
|
|
+ $openId = $data['openid'];
|
|
|
+ $access_token = $data['access_token'];
|
|
|
+ $user = UserService::getByOpenId($openId, $merchantId);
|
|
|
+ //用户来源
|
|
|
+ $userSource = Yii::$app->dict->getValue('userSourceGetId', 'official');
|
|
|
+ $source = $userSource['name'];
|
|
|
+ if (empty($user)) {
|
|
|
+ //$authScope 默认是 snsapi_base 公众号菜单打开网页(已经关注公众号，有完整信息)、打开付款页(有些客户只付款，没有后续可以不用登记完整信息)，只需要获取openid
|
|
|
+ $originalInfo = [];
|
|
|
+ $originalInfo['openId'] = $openId;
|
|
|
+ $originalInfo['merchantId'] = $merchantId;
|
|
|
+
|
|
|
+ //没有关注公众号，需要获取用户完整信息的情况，则通过弹框授权
|
|
|
+ if ($authScope == 'snsapi_userinfo') {
|
|
|
+ $baseInfo = wxUtil::authGetUserInfo($openId, $access_token);
|
|
|
+ $originalInfo = array_merge($baseInfo, $originalInfo);
|
|
|
+ $originalInfo['isFull'] = 1;
|
|
|
+ $originalInfo['unionId'] = $baseInfo['unionid'];
|
|
|
+ $originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
|
|
|
+ $originalInfo['nickName'] = $baseInfo['nickName'];
|
|
|
+ }
|
|
|
+ $user = UserService::replaceUser($originalInfo, $source, $merchantId);
|
|
|
+ } else {
|
|
|
+ if ($user['isFull'] == 0) {
|
|
|
+ if ($authScope == 'snsapi_userinfo') {
|
|
|
+ $baseInfo = wxUtil::authGetUserInfo($openId, $access_token);
|
|
|
+ $originalInfo = $baseInfo;
|
|
|
+ $originalInfo['isFull'] = 1;
|
|
|
+ $originalInfo['unionId'] = $baseInfo['unionid'];
|
|
|
+ $originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
|
|
|
+ $originalInfo['openId'] = $baseInfo['openid'];
|
|
|
+ $originalInfo['nickName'] = $baseInfo['nickName'];
|
|
|
+ $originalInfo['merchantId'] = $merchantId;
|
|
|
+ $user = UserService::replaceUser($originalInfo, $source, $merchantId);
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ //这个的基类没有设置统一的全局变量，这里进行设置一次
|
|
|
+ $userId = $user['id'];
|
|
|
+ $admin = AdminService::getByCondition(['userId' => $userId]);
|
|
|
+ if (empty($admin)) {
|
|
|
+ util::fail('您没有权限访问');
|
|
|
+ }
|
|
|
+ $adminId = $admin['id'];
|
|
|
+ //获取token
|
|
|
+ $token = jwt::getNewToken($adminId);
|
|
|
+ $url = strpos($url, '?') === false ? $url . '?token=' . $token : $url . '&token=' . $token;
|
|
|
+ $this->redirect($url);
|
|
|
+ }
|
|
|
+
|
|
|
+ //登陆并拿到token shish 2019.11.23
|
|
|
+ public function actionLogin()
|
|
|
+ {
|
|
|
+ $get = Yii::$app->request->get();
|
|
|
+ $mobile = isset($get['mobile']) ? $get['mobile'] : 0;
|
|
|
+ if (stringUtil::isMobile($mobile) == false) {
|
|
|
+ util::fail('请填写正常的手机号');
|
|
|
+ }
|
|
|
+ $password = isset($get['password']) && !empty($get['password']) ? $get['password'] : '';
|
|
|
+ if (empty($password)) {
|
|
|
+ util::fail('请输入密码');
|
|
|
+ }
|
|
|
+ $admin = AdminService::getByCondition(['mobile' => $mobile]);
|
|
|
+ if (password_verify($password, $admin['password']) == false) {
|
|
|
+ util::fail('密码错误');
|
|
|
+ }
|
|
|
+ $adminId = $admin['id'];
|
|
|
+ $shopAdmin = ShopAdminService::getByCondition(['adminId' => $adminId]);
|
|
|
+ $merchantId = isset($shopAdmin['merchantId']) ? $shopAdmin['merchantId'] : 0;
|
|
|
+ $shopId = isset($shopAdmin['shopId']) ? $shopAdmin['shopId'] : 0;
|
|
|
+ if (empty($shopId)) {
|
|
|
+ util::fail('您不是管理员');
|
|
|
+ }
|
|
|
+ //管理员关联门店
|
|
|
+ Yii::$app->redis->executeCommand('SET', ['LOGIN_ADMIN_SHOP' . $adminId, $shopId]);
|
|
|
+ //获取token
|
|
|
+ $token = jwt::getNewToken($adminId);
|
|
|
+ util::success(['token' => $token, 'account' => $merchantId, 'shopId' => $shopId]);
|
|
|
+ }
|
|
|
+
|
|
|
+ //静默获取小程序用户信息
|
|
|
+ public function actionMiniInfo()
|
|
|
+ {
|
|
|
+ $code = Yii::$app->request->get('code', '');
|
|
|
+ if (empty($code)) {
|
|
|
+ util::fail('没有CODE信息');
|
|
|
+ }
|
|
|
+ $wxMiniBase = WxOpenService::getWxMiniBase();
|
|
|
+ $appId = $wxMiniBase['miniAppId'];
|
|
|
+ $appSecret = $wxMiniBase['miniAppSecret'];
|
|
|
+ if (empty($appSecret)) {
|
|
|
+ util::fail('没有找到小程序的密钥');
|
|
|
+ }
|
|
|
+ $url = "https://api.weixin.qq.com/sns/jscode2session?appid={$appId}&secret={$appSecret}&js_code={$code}&grant_type=authorization_code";
|
|
|
+ $curl = new curl\Curl();
|
|
|
+ $result = $curl->get($url);
|
|
|
+ $arr = Json::decode($result);
|
|
|
+ $sessionKey = isset($arr['session_key']) ? $arr['session_key'] : '';
|
|
|
+ $openid = isset($arr['openid']) ? $arr['openid'] : '';
|
|
|
+ $cacheKey = 'SHOP_MINI_SESSION_KEY_' . $openid;
|
|
|
+ Yii::$app->redis->executeCommand('SET', [$cacheKey, $sessionKey]);
|
|
|
+ if (empty($openid)) {
|
|
|
+ Yii::info(json_encode($arr));
|
|
|
+ util::fail('没有获取到小程序openId');
|
|
|
+ }
|
|
|
+ //用户来源
|
|
|
+ $userSource = UserClass::$userSourceId['mini']['name'];
|
|
|
+ $admin = AdminService::getByMiniOpenId($openid);
|
|
|
+ $shopId = 0;
|
|
|
+ if (empty($admin)) {
|
|
|
+ $adminInfo = ['miniOpenId' => $openid];
|
|
|
+ $admin = AdminService::replaceAdmin($adminInfo, $userSource);
|
|
|
+ $adminId = $admin['id'];
|
|
|
+ }
|
|
|
+ $shopId = $admin['currentShopId'] ?? 0;
|
|
|
+ $shopAdminId = 0;
|
|
|
+ if (!empty($shopId)) {
|
|
|
+ $shopAdmin = ShopAdminClass::getByCondition(['shopId' => $shopId, 'adminId' => $adminId]);
|
|
|
+ $shopAdminId = $shopAdmin['id'] ?? 0;
|
|
|
+ }
|
|
|
+ //头像
|
|
|
+ $avatar = isset($admin['avatar']) && !empty($admin['avatar']) ? Yii::$app->params['imgHost'] . $admin['avatar'] : Yii::$app->params['imgHost'] . '/retail/default-img.png';
|
|
|
+ $admin['avatar'] = $avatar;
|
|
|
+ //管理员关联商家
|
|
|
+ Yii::$app->redis->executeCommand('SET', ['LOGIN_ADMIN_SHOP' . $adminId, $shopId]);
|
|
|
+ $token = jwt::getNewToken($adminId);
|
|
|
+ util::success(['token' => $token, 'admin' => $admin, 'shopId' => $shopId, 'shopAdminId' => $shopAdminId]);
|
|
|
+ }
|
|
|
+
|
|
|
}
|
shish